From owner-freebsd-isp Sun May 3 12:08:20 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA08384 for freebsd-isp-outgoing; Sun, 3 May 1998 12:08:20 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from syzygy.zytek.com (syzygy.zytek.com [140.174.241.1]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id MAA08379 for ; Sun, 3 May 1998 12:08:18 -0700 (PDT) (envelope-from mccord@zytek.com) Received: (from mccord@localhost) by syzygy.zytek.com (8.6.11/8.6.9) id MAA14038; Sun, 3 May 1998 12:08:19 -0700 Date: Sun, 3 May 1998 12:08:19 -0700 From: Samara McCord Message-Id: <199805031908.MAA14038@syzygy.zytek.com> To: freebsd-isp@FreeBSD.ORG Subject: Re: SMTP vs Spam Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Err. You can send e-mail via POP3. XTND XMIT is the command, and is >implimented in QPopper and Eudora I believe. I am not aware of any >other POP servers that have XTND XMIT.... > Yikes, this was news to me, as it is to perhaps others running QPopper. This seems to be a Qualcomm specific thing. Anyone know otherwise? Anyway, the current implementation does the following (just do you know): 1. creates temporary file /var/mail/xmit 2. accept message until trailing period 3. close temporary file 3. fork 4. open temporary file as stdin 5. exec: /usr/sbin/sendmail -t -oem 6. wait for child exit 7. delete temporary file unless in debug mode Note that sendmail will read the /etc/sendmail.cf file, even in this single message mode. Seems like there are some security issues here. Of course the POP connection is authorized before this can happen, but we'll have to think about the implications of having direct access to /usr/sbin/sendmail. Sam To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message